Privacy Policy
- You sign in with your Google account: we receive your email, name and profile picture.
- Recordings are stored in the EU. The replay buffer never leaves your browser unless you save it.
- The content of your recordings is not used for analytics or advertising and is never sold.
- Deleting a recording or your account deletes the files from storage.
1. Who processes your data
The FlickBack service — the Chrome extension, the website flickback.dev, the dashboard and the link pages — is provided by Individual Entrepreneur (FOP) Lihachov Yehor Tymurovych, Ukraine ("we", "us"). We decide why and how your data is processed and are responsible for it.
Questions about your data: privacy@flickback.dev.
2. Data we collect
We collect only what the service cannot work without.
| Data | Purpose | Source |
|---|---|---|
| Email, name, profile picture | Sign-in, contacting you about your account and payments | Your Google account |
| Screenshots and videos saved to the cloud | Storing them and showing them by link | You |
| Steps, console errors and network requests in a recording | Showing them on the recording page | The extension, during a recording |
| Address and title of the page where a recording or screenshot is made | Showing them in the library and on the link page | The extension |
| Usage events, without the content of recordings | Statistics and product improvement | The extension and the dashboard |
| Anonymous extension installation ID | Counting usage events before sign-in | The extension |
| Messages sent through the contact form | Replying to you | You |
| Payment data | Subscription and receipts | Paddle; we never receive your card number |
3. Data we do not collect
- The replay buffer: it is kept only in your browser's memory and is constantly overwritten. Only what you save reaches our servers.
- Page content, unless you take a screenshot or make a recording.
- Bank card numbers: they are processed by Paddle.
- Passwords: password fields in recordings are hidden when the option to hide personal data is turned on in the extension (it is on by default).
4. Legal bases
- Performance of a contract — your account, storing recordings, links, subscription.
- Legitimate interest — service security, abuse prevention, anonymised usage statistics.
- Consent — messages sent through the contact form.
- Legal obligation — payment records and tax reporting.
5. Where your data is stored
Accounts and the database — Supabase, EU region. Recording files — Cloudflare R2, EU region, a private storage with no public access. A recording opens only through a link with a random address; deleting the recording disables the link.
Google, Cloudflare and Paddle may process some data outside the EU. Such transfers are protected by the European Commission's Standard Contractual Clauses or equivalent safeguards.
6. How long we keep data
Recordings are kept until you delete them. Deleted recordings stay in the trash for 30 days and are then removed from storage. After you delete your account, your data is deleted within 30 days, and from database backups within 7 days. Payment records are kept for as long as tax law requires.
7. Who we share data with
Only with processors the service cannot work without, and only as much as they need:
- Google — sign-in;
- Supabase — database and accounts;
- Cloudflare — file storage and server infrastructure;
- Paddle — payments, receipts, taxes and refunds.
8. Cookies and local storage
The website and the dashboard use only necessary cookies and browser local storage: to keep you signed in and to remember your theme and language. There are no advertising or third-party tracking cookies.
9. Your rights
You can get a copy of your data, correct or delete it, restrict or object to its processing, move it to another service, withdraw your consent, and file a complaint with the data protection authority in your country.
You can delete your account in the dashboard: "Settings → Account → Delete account". For all other requests, write to privacy@flickback.dev; we reply within 30 days.
10. Children
The service is not intended for anyone under 16. If you learn that a child has given us their data, write to privacy@flickback.dev and we will delete it.
11. Changes
We notify you of material changes by email at least 14 days in advance. The date of the current version is shown at the top of this document.